PT-2024-1476 · Redis · Redis

Name of the Vulnerable Software and Affected Versions: Redis versions master-1b8bd86 through master-7b46079 Description: The issue is related to an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/alloc.c. This is associated with a buffer overflow in memory, which...

CVE-2023-31654

Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/alloc.c...

FreeBSD : hiredis -- integer/buffer overflow (2220827b-c732-11ec-b272-901b0e934d69)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2220827b-c732-11ec-b272-901b0e934d69 advisory. - Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is...

Amazon Linux 2 : hiredis (ALASREDIS6-2023-004)

The version of hiredis installed on the remote host is prior to 0.13.3-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2REDIS6-2023-004 advisory. Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer...

Important: hiredis

Issue Overview: Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted RESP mult-bulk protocol data. When parsing multi-bulk array-like replies, hiredis fails to check if count...

The vulnerability of the hiredis library in the NoSQL database management system Redis, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hiredis library in the NoSQL Redis database management system is related to integer overflow. Exploiting this vulnerability allows an attacker to remotely access confidential data, compromise its integrity, and cause service failures...

SUSE CVE-2020-7105

async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked...

SUSE CVE-2021-32765

Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted RESP mult-bulk protocol data. When parsing multi-bulk array-like replies, hiredis fails to check if count sizeofredisReply...

SUSE CVE-2021-32762

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This is a result of a vulnerability in the underlying hiredis librar...

hiredis, hiredis-py: Multiple Vulnerabilities

Background hiredis is a minimalistic C client library for the Redis database. hiredis-py is a Python extension that wraps hiredis. Description Hiredis is vulnerable to integer overflow if provided maliciously crafted or corrupted RESP mult-bulk protocol data. When parsing multi-bulk array-like...

GLSA-202210-32 : hiredis, hiredis-py: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-32 hiredis, hiredis-py: Multiple Vulnerabilities - Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupt...

[SECURITY] Fedora 35 Update: hiredis-0.13.3-17.fc35

Hiredis is a minimalistic C client library for the Redis database...

Fedora: Security Advisory for hiredis (FEDORA-2022-ec83686a30)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mageia: Security Advisory (MGASA-2020-0109)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0562)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2021-0562 Updated hiredis packages fix security vulnerability

Updated hiredis packages fix security vulnerability: It was discovered that there was an integer-overflow vulnerability in hiredis, a C client library for communicating with Redis databases. This occurred within the handling and parsing of 'multi-bulk' replies CVE-2021-32765...

Updated hiredis packages fix security vulnerability

Updated hiredis packages fix security vulnerability: It was discovered that there was an integer-overflow vulnerability in hiredis, a C client library for communicating with Redis databases. This occurred within the handling and parsing of 'multi-bulk' replies CVE-2021-32765...

OPENSUSE-SU-2021:1550-1 Security update for hiredis

This update for hiredis fixes the following issues: - CVE-2021-32765: Fix integer/buffer boo1191331 This update was imported from the openSUSE:Leap:15.2:Update update project...

Security update for hiredis (moderate)

openSUSE Security Update: Security update for hiredis Announcement ID: openSUSE-SU-2021:1550-1 Rating: moderate References: 1191331 Cross-References: CVE-2021-32765 CVSS scores: CVE-2021-32765 NVD : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP2 ...

openSUSE: Security Advisory for hiredis (openSUSE-SU-2021:1536-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...